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I. Basis of the report 

1 . This report has been drawn on the basis of (substitute sheets which have been furnished to the receiving Office in 
response to an invitation under Article 14 are referred to in this report as "originally filed" and are not annexed to 
the report since they do not contain amendments.): 

Description, pages: 

1-10 as originally filed 

Claims, No.: 

1-20 as received on 27/09/1999 with tetter of 21/09/1999 

Drawings, sheets: 

1/10-10/10 as originally filed 

2. The amendments have resulted in the cancellation of: 

□ the description, pages: 

□ the claims, Nos.: 

□ the drawings, sheets: 

3. □ This report has been established as if (some of) the amendments had not been made, since they have been 

considered to go beyond the disclosure as filed (Rule 70.2(c)): 

4. Additional observations, if necessary: 

III. Non-establishment of opinion with regard to novelty, inventive step and industrial applicability 

The questions whether the claimed invention appears to be novel, to involve an inventive step (to be non-obvious), 
or to be industrially applicable have not been examined in respect of: 

□ the entire international application. 
H claims Nos. 18-20. 

because: 
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□ the said international application, or the said claims Nos. relate to the following subject matter which does 
not require an international preliminary examination {specify): 

H the description, claims or drawings (indicate particular elements beloW) or said claims Nos. 18-20 are so 
unclear that no meaningful opinion could be formed {specify): 

see separate sheet 

□ the claims, or said claims Nos. are so inadequately supported by the description that no meaningful opinion 
could be formed. 

□ no international search report has been established for the said claims Nos. . 

V. Reasoned statement under Article 35(2) with regard to novelty, inventive step or industrial 
applicability; citations and explanations supporting such statement 

1. Statement 



Novelty (N) 


Yes: 


Claims 


1-17 




No: 


Claims 




Inventive step (IS) 


Yes: 


Claims 






No: 


Claims 


1-17 


Industrial applicability (IA) 


Yes: 


Claims 


1-17 




No: 


Claims 





2. Citations and explanations 
see separate sheet 

VII. Certain defects in the international application 

The following defects in the form or contents of the international application have been noted: 
see separate sheet 
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VIII. Certain observations on the international application 

The following observations on the clarity of the claims, description, and drawings or on the question whether the 
claims are fully supported by the description, are made: 

see separate sheet 
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Indications relating to item V (novelty, inventive step and industrial 
applicability) 

1. Document WO 95/35633 (hereinafter referred to as D1) discloses (see in 

particular page 1 4, line 1 8 to page 1 7, line 1 1 ; page 1 8, line 6 to page 1 9, line 1 6; 
page 20, line 8 to page 43, line 2; abstract), according to the essential features of 
claim 1, a method of operating a node in a communications network, which node 
is in use connected to a signal source external to the communications network 
(see abstract), the method comprising: 

a) receiving from the said signal source signals which include a control field, which 
control field takes one of a plurality of possible values, and the subsequent 
handling of the said signal by the network being controlled according to the value 
of the control field (page 15, lines 1-9); 

b) overwriting the control field with a value from a restricted subset of the plurality 
of possible values (page 15, lines 7-15); and 

c) subsequently processing the signal in the network in dependance upon the said 
value from the restricted subset of the plurality of possible values (page 15, lines 
16-36). 

The method of D1 is thus substantially equivalent to the subject-matter of claim 1 , 
making use of the same idea of providing an effective control of the use made of 
access to network by an external party, without requiring continual high-level 
screening of traffic through the node. 

The subject-matter of claim 1 differs in fact from the disclosure of D1 merely in 
that the control field is overwritten within a lower level of a messaging protocol 
running on the node and prior to the processing of the signal by higher 
level functions running on the node. 

Although D1 does not explicitly disclose the fact of overwriting the control field 
within a lower level of a messaging protocol running on the node and prior to the 
processing of the signal by higher level functions running on the node, the method 
according to D1 does in fact employ the SS7 protocol in an equivalent manner. 

The fact of overwriting the control field within a lower level of a messaging 
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protocol running on the node and prior to the processing of the signal by higher 
level functions running on the node represents therefore in the light of D1 merely 
a common design measure within the normal range of options envisaged by a 
person skilled in the art. 

The subject-matter of claim 1 does not therefore involve an inventive step (Article 
33 (3) PCT). 

The same objections as for claim 1 arise in respect of the independent claims 2, 
13, 14 and 15. 

The subject-matter of claims 2, 13, 14 and 15 does not therefore involve an 
inventive step (Article 33 (3) PCT). 

2. The additional features of dependent claims 3 to 7 and 1 6 are either known from 
D1, i.e. the use of a common channel signalling protocol and the use of the ITU-T 
Signalling System no. 7, or are considered to be common design measures within 
the normal range of options envisaged by a person skilled in this art. 

Therefore, said features do not, either alone or in combination, add any inventive 
activity to claims 1 , 2 and 1 5. 

3. Independent claims 8 and 17 correspond for the category "apparatus" to the . 
method of claim 1 , therefore the same objections arise as for claim 1 (reference is 
directed to paragraph 1. above). 

The subject-matter of claims 8 and 17 does not therefore involve an inventive step 
(Article 33 (3) PCT). 

The additional features of dependent claims 9 and 10 are either known from D1 
or are considered to be common design measures within the normal range of op- 
tions envisaged by a person skilled in this art. 

Therefore, said features do not, either alone or in combination, add any inventive 
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activity to claim 8. 

The same objections as for claim 8 arise in respect of claim 11 which defines 
merely a communications network including a node according to claim 8 or 9 or 
10. 

The subject-matter of claim 1 1 does not therefore involve an inventive step (Article 
33 (3) PCT). 

Indications relating to item VII (certain defects in the international 
application): 

1 . The independent claims are not in the two-part form in accordance with Rule 6.3 
(b), (Of 00 PCT, having a pre-characterising portion which correctly reflects the 
prior art of document D1. 

2. Contrary to the requirements of Rule 5.1 (a) (ii) PCT, the cited document D1 is not 
acknowledged in the opening part of the description. 

3. The claims are not provided with reference signs placed in parentheses relating to 
the technical features referred to therein, Rule 6.2 (b) PCT. 

Indications relating to item III (non-establishment of opinion) and 
Indications relating to item VIII (certain observations on the 
international application) 

1. The application contains 20 claims, including a plurality of independent claims, 
having overlapping scope . It does not seem that such a multiplicity of 
independent claims is strictly necessary and hence the number would not appear 
to be reasonable (Rule 6.1 (a) PCT); furthermore the claims themselves are not 
clear and concise , so that the requirements of Article 6 PCT are not met. 

The claims to be filed to meet the above objections should contain only the 
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minimum number of independent claims necessary to clearly and sufficiently 
define the invention, with dependent claims as appropriate, Article 6 and Rule 6.4 
PCT. In the present case it is considered appropriate to use only one independent 
claim per category. 

2. Furthermore, claim 18 does not meet the requirements of Article 6 and Rule 6.3 
(a) PCT in that it does not define clearly the scope of the monopoly for which pro- 
tection is sought and furthermore it does not contain the essential features which 
are necessary to carry out the invention. 

In fact, the subject-matter of present claim 18 defines simply: "A method 
substantially as described with respect to the accompanying drawings". 

The extent of protection which is sought is not clear because independent claim 
18 does not contain any technical feature relating to the method. 

Moreover, 18 does not meet the requirements of Rule 6.2 (a) PCT in that they rely 
on references to the drawings. 

The same objections as for claim 18 arise also for claims 19 and 20. 
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1 1 

CLAIMS 

1 . A method of operating a node in a communications network, which node 
is in use connected to a signal source external to the communications network, the 
method comprising: 

5 a) receiving from the said signal source signals which include a control 

field, which control field takes one of a plurality of possible values, and the 
subsequent handling of the said signal by the network being controlled according 
to the value of the control field; 

b) within a lower level of a messaging protocol running on the node, and 
10 * prior to the processing of the signal by higher level functions running on the node, 

overwriting the control field with a value from a restricted subset of the plurality 
of possible values; and 

c) subsequently processing the signal in the network in dependence upon 
the said value from the restricted subset of the plurality of possible values. 

15 

2. A method of operating a communications network comprising: 

a) communicating control signals between nodes of the network, which 
control signals conform to a predetermined signalling protocol; 

b) at one of the said nodes, receiving from a signal source external to the 
20 network signals conforming to the said predetermined protocol and including a 

control field, which control field takes one of a plurality of possible values; 

c) within a lower Jevel of a messaging protocol running on the node, and 
prior to the processing of the signal by higher level functions running on the node 
overwriting the control field with a value from a restricted subset of the plurality of 

25 possible values; and 
. . d) subsequently processing the signal in the network in dependence upon 

the said value from the restricted subset of the plurality of possible values. 

3. A method according to claim 1 or 2, in which step (c) is carried out within 
30 a data link layer interface, which data link layer interface is arranged to respond to 

service request from network layer functions of the node and to issue service 
requests to the communications network. 
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4. A method according to any one of the preceding claims, in which the said 
control field is a routing control field, and the overwriting of the routing control 
field with a predetermined value in step (b) limits the routing of signals to or from 
the external source to part only of the communications network. 

5 

5. A method according to claim 4, in which the routing of signals to or from 
the external source is limited to a point-to-point connection between the external 
source and the node. 

10 v 6. A method according to any one of the preceding claims, in which the said 

signals conform to a common channel signalling protocol. 

7. A method according to claim 6, in which the common channel signalling 
protocol is ITU-T Signalling System no. 7. 

15 

8. A node suitable for connection in a communications network and 
comprising: 

a) a network interface for connection to the communications 

network; 

20 b) a signal interface for connection to a signal source external to the 

communications network; 

c) means connected to the signal interface for overwriting, within a 
lower level of a messaging protocol, a control field in a signal received via' the 
signal interface from the signal source with one of a subset of predetermined 

25 values; and 

d) signal processing means for processing the said signal in 
dependence upon the said one of a subset of predetermined values. 

9. A node according to claim 8, in which the said means for overwriting are 
30 located within a data link layer interface, which data link layer interface is 

arranged to respond to service request from network layer functions of the node 
and to issue service requests to the communications network. 
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10. A node according to claim 8 or 9, in which the signal processing means 
are arranged to route the signal in dependence upon the value of the said control 
field. 

5 11. A communications network including a node according to claim 8 or 9 or 
10. 

12. A communications network according to claim 1 1 including a common channel 
signalling network carrying signals conforming to a common channel signalling 
10 v protocol and in which both the said network interface and the said signal 
interface are arranged to communicate signals conforming to the said common 
channel signalling protocol. 



13. A method of operating a node in a communications network, which node 
15 is in use connected to a signal source external to the communications network, the 

method comprising: 

a) receiving from the said signal source signals which include a control 
field, which control field takes one of a plurality of possible values, and the 
subsequent handling of the said signal by the network being controlled according 

20 to the value of the control field; 

b) overwriting the control field with a value from a restricted subset of 
the plurality of possible values; and 

c) subsequently processing the signal in the network in dependence upon 
the said value from the restricted subset of the plurality of possible values. 

25 

14. A method of operating a communications network comprising: 

a) communicating control signals between nodes of the network, 
which control signals conform to a predetermined signalling protocol; 

b) at one of the said nodes, receiving from a signal source external 
30 to the network signals conforming to the said predetermined protocol and including 

a control field, which control field takes one of a plurality of possible values; 

c) overwriting the control field with a value from a restricted subset 
of the plurality of possible values; and 
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d) subsequently processing the signal in the network in dependence 
upon the said value from the restricted subset of the plurality of possible values. 

15. A method of operating a node in a communications network, which node is in 
5 use connected to a signal source external to the communications network, the 

node including a data link layer interface arranged to respond to service request 
from network layer functions of the node and to issue service requests to the 
communications network the method comprising: 

a) receiving from the said signal source signals which include a control 
10 v field, which control field takes one of a plurality of possible values, and the 

subsequent handling of the said signal by the network being controlled according 
to the value of the control field; 

b) within the data link layer interface overwriting the control field with a 
value from a restricted subset of the plurality of possible values; and 

15 c) subsequently processing the signal in the network in dependence upon 

the said value from the restricted subset of the plurality of possible values. 

16. A method according to any one of claims 1 to 7 or claim 15, including writing 
control field data received on each of a plurality of signalling links into 
respective signalling link data buffers, and overwriting the control fields in the 
respective data buffers with the said value. 

17. A node arranged to operate in accordance with the method of claim 1 5 or 16. 

25 18. A method substantially as described with respect to the accompanying 
drawings. 

19. A node substantially as described with respect to the accompanying drawings. 

30 20. A communications network substantially as described with respect to the 

£> 

accompanying drawings. 
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This International Search Report consists of a total of . 



.sheets. 



[~Xl ft is also accompanied by a copy of each priorart document cited in this report. 
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matter going beyond the disclosure in the international application as filed. 
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4. With regard to the title, the text is approved as submitted by the applicant 
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SIGNALING METHOD IN A TELECOMMUNICATIONS NETWORK 
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6. The figure of the drawings to be published with the abstract is: 
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The present invention relates to a communications network, and in 
particular to the handling of control signals passing between a network node and a 
source external to the network. 

In the past, large communications networks, such as public switched 
telephony networks (PSTNs), have been used under the sole control of a single 
operator, and interactions with other networks and with devices external to the 
network have been simple and restricted in nature. Such networks have therefore 
been designed to offer a wide range of control functions within the network 
infrastructure but without these functions being exposed outside of the network. 
In recent years however, there has been an increasing need to interface networks 
with other networks, and to make at least part of the network functionality 
available to third parties who wish to provide a service to customers connected to 
the network. This then raises the problem of unauthorised use of the network. 
For example, the network operator may allow a third party to connect to an access 
node for processing of calls which originate or terminate in the network. This 
access must not be exploited by the third party for transfer routing of calls to or 
from customers located outside of the network without prior agreement. To 
prevent such unauthorised use, it has been necessary hitherto to screen all such 
traffic in order to bar any illicit use of the access point. However, this imposes 
heavy burdens in terms of data management, data storage and processing, and 
becomes increasingly impractical as the number of parties accessing the network 
in this way increases. To avoid such processing overheads, whilst preventing 
unauthorised access to the network, it has been proposed to use a different 
signalling protocol with restricted capabilities on the access link to that used within 
the network. This however necessitates modification of the access node in order 
to handle the additional protocol, and involves additional costs for both the 
network operator and the party accessing the network. 

According to a first aspect of the present invention, there is provided a 
method of operating a node in a communications network, which node is in use 
connected to a signal source external to the communications network, the method 
comprising: 
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a) receiving from the said signal source signals which include a control 
field, which control field takes one of a plurality of possible values, and the 
subsequent handling of the said signal by the network being controlled according 
to the value of the control field; 
5 b) overwriting the control field with a value from a restricted subset of 

the plurality of possible values; and 

c) subsequently processing the signal in the network in dependence upon 
the said value overwritten in step (b). 

According to a second aspect of the present invention, there is provided a 
10 method of operating a node in a communications network, which node is in use 
connected to a signal source external to the communications network, the method 
comprising: 

a) receiving from the said signal source signals which include a control 
field, which control field takes one of a plurality of possible values, and the 

1 5 subsequent handling of the said signal by the network being controlled according 
to the value of the control field; 

b) within a lower level of a messaging protocol running on the node, and 
prior to the processing of the signal by higher level functions running on the node, 
overwriting the control field with a value from a restricted subset of the plurality 

20 of possible values; and 

c) subsequently processing the signal in the network in dependence upon 
the said value overwritten in step (b). 

The present invention provides effective control of the use made of access 
to the network by an external party, without requiring continual high-level 

25 screening of traffic through the node, and without it being necessary to use a 
different signalling protocol to that adopted elsewhere in the network. This is 
achieved by overwriting control fields in the incoming signalling with allowed 
values determined by the network operator. The subsequent handling of the 
signal, and any consequent processing by the network, for example of a voice call, 

30 is then constrained by the values written in the control fields. It is particularly 
advantageous to overwrite the control field within a low level of the messaging 
protocol used to communicate with the node. In particular this may be done within 
the signalling link layer, that is the data link layer, layer 2 of the ISO 7-layer model. 
It is found that by providing security at this low level, the solution offered by the 
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present invention is made fast, robust and readily scaleable, by contrast with prior 
art systems which operate at an application level. 

Preferably the said control field is a routing control field, and the 
overwriting of the routing control field with a predetermined value in step (b) limits 
5 the routing of signals to or from the external source to part only of the 
communications network. Preferably the routing of signals to or from the external 
source is limited to a point-to-point connection between the external source and 
the node. 

Often, a third party will be given a connection to an access node with the 
10 intention that it should be used as a simple point-to-point link for direct transfer of 
signals into or out of the network. However, depending on the values set in the 
routing control fields of the incoming signals, the third party might extend its 
access to further nodes beyond the original access node. This might be done, for 
example, in order to implement transfer routing through the network to another 
1 5 party outside of the network. This preferred aspect of the invention prevents this 
by overwriting the routing control fields. In the case of a network employing ITU-T 
Signalling System No. 7 (SS7), the relevant control fields are the originating point 
code (OPC) and destination point code (DPC) and the access node overwrites one 
or both of these codes. The OPC may be overwritten with the point code of the 
20 external signal source, and the DPC may be overwritten with the point code of the 
access node. 

SS7 is a widely adopted and stable protocol for common channel signalling 
in communications networks. It is a highly flexible protocol which makes possible 
a wide range of control functions. The present invention is particularly 
25 advantageous in this context since it allows use of the SS7 protocol without 
modification for access signalling whilst effectively constraining the use made of 
the protocol. 

The invention is by no means limited to use with routing control codes. It 
may also advantageously be implemented, for example, by overwriting a code 
30 which identifies the originating network for a signal. This code may be the 
Network Identifier Code specified in the SS7 NUP (national user part) protocol, and 
published in the BT National Requirements document BTNR 167, Issue 3, July 
1987, Vol. 1. Overwriting this code can provide another means to prevent use of 
the network as a transit network, or can be used to ensure appropriate billing of 
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traffic when this depends on the originating network. Overwriting such a code 
may be carried out in addition to, or alternatively in place of, overwriting point 
codes. 

The invention is not limited to use with SS7, but may also be used with 
5 different network protocols, including, for example, Internet Protocol or the X25 
packet data protocol. 

According to a second aspect of the present invention, there is provided a 
method of operating a communications network comprising: 

a) communicating control signals between nodes of the network, 
10 which control signals conform to a predetermined signalling protocol; 

b) at one of the said nodes, receiving from a signal source external 
to the network signals conforming to the said predetermined protocol and including 
a control field, which control field takes one of a plurality of possible values; 

c) overwriting the control field with a value from a restricted subset 
15 of the plurality of possible values; and 

d) subsequently processing the signal in the network in dependence 
upon the said value overwritten in step (c). 

According to a further aspect of the present invention there is provided 
node suitable for connection in a communications network and comprising: 
20 a) a network interface for connection to the communications 

network; 

b) a signal interface for connection to a signal source external to the 
communications network; 

c) means for overwriting with one of a subset of predetermined 
25 values a control field in a signal received via the signal interface from the signal 

source; and 

d) signal processing means for processing the said signal in 
dependence upon the value of the said control field. 

According to a further aspect of the present invention, there is provided a 
30 node suitable for connection in a communications network and comprising: 

a) a network interface for connection to the communications 

network; 

b) a signal interface for connection to a signal source external to the 
communications network; 
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c) means connected to the signal interface for overwriting, within a 
lower level of a messaging protocol, a control field in a signal received via the 
signal interface from the signal source with one of a subset of predetermined 
values; and 

5 d) signal processing means for processing the said signal in 

dependence upon the value of the said control field. 

The invention also encompasses networks adapted to operate in 
accordance with the first or second aspects. 

Systems embodying the present invention will now be described in further 
10 detail, by way of example only, with reference to the accompanying drawings, in 
which: 

Figure 1 is a schematic of a network embodying the invention; 
Figure 2 is a schematic showing switching points in the network of Figure 1 ; 
Figure 3 is a diagram showing a SS7 protocol stack; 
1 5 Figure 4 is a diagram showing the format of a SS7 Message Signalling Unit 

(MSU); 

Figure 5 is an SDL (Specification and Description Language) definition of 

processes implementing the present invention; 
Figure 6 is an SDL definition of an alternative embodiment; 
20 Figure 7 is a further SDL diagram, indicating the operation point of the 

invention; 

Figure 8 is a diagram showing an example digital local exchange; 
Figure 9 is a diagram showing in further detail the signalling hardware module 
in the exchange of Figure 8; and 
25 Figure 10 shows a further embodiment of the invention in a network using 

internet protocols. 

A telecommunications network which uses an IN (Intelligent Network) architecture 
includes a service control point (SCP) 1 . The service control point 1 is connected 
to digital trunk switching units 2 ,3 (also termed "trunk switches") and to digital 
30 local exchanges (DLE's) 4,5 (also termed "local switches"). The switches in this 
example also function as service switching points (SSP's). At certain points 
during the progress of a call, the SSP's transfer information related to the call to 
the service control point. The service control point carries out functions such as 
number translation, and may control collection of additional call related 
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information. The trunk switches communicate with each other and with the 
service control point via the signalling network 6. The components so far 
described are all within the network, in the region referenced a, and are under the 
control of the network operator. A third party node (3ptyN) is located outside of 
5 the network in the region referenced b and connects to the network at an access 
node using the signalling protocol of the common channel signalling network. In 
the present example, this protocol is ITU-T Signalling System No. 7 (SS7). For a 
full description of SS7, reference is made to the ITU recommendations 
{Q.700/1/2/3/4/5/6/7/8}. - Specification of signalling system No. 7; and the journal 

10 British Telecommunications Engineering, vol. 7 , part 1, April 1988, "CCITT 
Signalling System No. 7". 

Figure 2 shows schematically SS7 switching points referenced A, B and C. 
These correspond respectively to trunk switch 3, to the third party node and to the 
SCP 1. The operator of the network in region A sanctions access by the third 

1 5 party to the network, for example in order to provide a number translation service 
to customers connected to the network. It is agreed with the service provider, or 
other operator that the third party node will use a direct SS7 signalling link to trunk 
switch 3, and will not access other nodes of the network such as the SCP 1 , and 
will not use access to the SS7 signalling network for transfer routing of calls. 

20 Figure 3 shows the SS7 protocol stack. One characteristic feature of the 

SS7 protocol is the use of modular structure in which application-dependent 
functions in a layer termed the User part 32 are supported by a lower level 
transport protocol, termed the Message transfer part (MTP) 31 . The MTP has a 
three-level structure. Level 1 includes the physical signalling data link. In a digital 

25 network this is provided by a predetermined one of a number of time slots in a 
PCM system operating at, e.g. 64kbit/s. Level 2 includes the hardware of the 
signalling terminal together with the functions necessary to translate between 
processor software signals and the bit stream of the signalling data link. Level 3 
comprises signalling network functions including functions for the transfer of 

30 messages, for the reconfiguration of routes after failure, and for sending 
information about faults in the signalling network. 

Figure 4 shows the format of a message signalling unit (MSU) which is 
handled by a Signal Message Handling function of Level 3 of MTP. A message is 
delivered to the Level 3 of the MTP which adds some information and then passes 
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it to Level 2. Level 2 headers are added and the MSU is output for transmission on 
the SS7 signalling network. In addition to the Level 2 headers, and user 
information for use by the Level 4 application, the MSU contains the following 
fields: 

5 DPC - destination point code 

OPC - originating point code 
. SIO - service information octet 
SLS - signalling link selection. 
The OPC and DPC fields are each 14 bits long, and in conjunction with the 
10 Network Indicator code contained in the SIO field, form the complete point code of 
a particular node. 

In the present example, an interconnect agreement between the network 
operator specifies that SS7 traffic between nodes B and A should be limited to a 
simple duplex connection. If this agreement is adhered to, then all SS7 MSU's 

1 5 sent by the node B to the access node A should have code-A in the DPC field, 
where code-A is the 14 bit point code of the access node A. Similarly the MSLTs 
should have code-B in the OPC field, where code-B is the 14 bit point code of the 
interconnected network or service provider, at node B. If however the data is 
incorrectly defined at the nodes, then these fields may contain other values. For 

20 example, in implementing transfer routing, the service node might write a value for 
the DPC field which is not code-A, but is the point code of another node, outside 
of region a of the network. To eliminate the possibility of such breaches, without 
imposing a heavy processing overhead, the signalling link hardware in the access 
node, which implements Level 2 of the MTP, overwrites the OPC and DPC fields 

25 of SS7 signalling from the third party node with the allowed values, namely code-B 
and code-A respectively, also ensuring that the correct Network Indicator is 
applied. In addition, or alternatively, other parts of the MSU may be overwritten. 
In particular, as discussed in the introduction above, the NUP (national user part) 
identifier may be overwritten with the value corresponding to the party operating 

30 node B. 

Figure 5 is an SDL diagram showing the modifications made to Level 2 
MTP in order to implement the policing function described above. Feature data for 
each signalling link indicates whether the relevant link is to be policed or not. In 
step s1 the feature data is tested. If the link is to be policed then in step s2 the 
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OPC of the incoming MSU is tested to see whether it has the allowed value. If it 
has not, then in step s3 the OPC is overwritten with the allowed value and in step 
s4 the policing violation is notified to an alarm process. Similarly, in step s5, the 
DPC is tested to see whether it has the allowed value, and in steps s6 and s7 it is 
5 overwritten and a policing violation notified if the DPC is not the allowed value for 
that link. Following these steps, the Level 2 processing of signalling continues in a 
conventional fashion, and the resulting MSLTs are passed to Level 3 of the MTP, 
where routing and message handling functions are carried out on the basis of the 
DPC and OPC values which are guaranteed to be permitted value. Accordingly 
10 further policing is not required in Level 3. The process of Figure 5 is shown by 
way of example only, and other implementations are possible. For example, the 
DPC may be checked, and if necessary may be overwritten, prior to the OPC being 
checked. 

Figure 6 shows the modified SDL of an alternative embodiment. Initially, 
15 as in the first embodiment, the feature data is tested to determine whether the 
policing flag has been set (s61). In addition, a test is carried out to determine 
whether another flag in the feature data indicating that an alarm function is 
required has been set (s62). If this flag has not been set, that is to say if policing 
is required without an alarm function, then in steps s63 and s64 the OPC and DPC 
20 codes are overwritten unconditionally. Otherwise, in steps s65 and s66, the OPC 
and DPC codes are tested, and the codes overwritten and alarms raised depending 
on the outcome of the 

tests, as described previously in relation to the first embodiment. 

The modified SDL of the first or second embodiments may be substituted 

25 in the Basic Transmission Control SDL of the SS7 standard published in ITU Q.703 
Figure 14, sheet 5 of 6. The position of the new SDL required by the invention is 
illustrated in Figure 7, in which the new SDL is shown in bold. In implementing 
the invention, an instance of the processes defined by the SDL is created for each 
link handled by the node. In this way, the policing function is inherently scaleable, 

30 by contrast with methods previously adopted in which policing was carried out 
entirely in software and in a much higher level of the protocol stack, where one 
function would be required to handle many links. 

Figure 8 shows an example of a network node, in this case a digital local 
exchange, implementing the invention. It will be understood that this is chosen by 
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way of illustration only, and that the invention may be implemented on a wide 
range of different platforms. The principal elements of the exchange comprise 
transmission equipment 81, a digital switch 82, signalling transport hardware for 
the signalling links 83, signalling^a?xlw##Wodules 84, and processor systems 85 
5 that control all the elements for either normal call processing or management 
activity. Each signalling transport hardware modules terminates a number, e.g. 
1 6, signal links, each link comprising a pair of incoming and outgoing signals 
respectively. For each link there is provided within the SS7 signalling transport 
hardware, a respective input buffer and output buffer, and cyclic redundancy 

10 check (CRC) system that performs basic error checking on the received message. 
If the computed check-sum value has the expected value, then the signal is passed 
upwards to the signalling processor and subsequently on to the call processing 
system which executes basic call processing functions. If however, a bit error is 
encountered the message is immediately discarded. The processor system 

1 5 constantly monitors the buffers to ensure that when an incoming signal is received 
the input buffers can accommodate it. If full, the processor writes a TFC 
(transfer controlled) message via the output buffer of the respective link. 
Otherwise the signal is transferred to the other signalling hardware 84. The other 
signalling hardware discriminates signals addressed to the node from other signals 

20 using the MTP OPC DPC codes. If the DPC is not that of this node, then it directs 
the signal back through the signalling transport hardware to a relevant output link. 
In addition, in a node embodying the invention, the other signalling hardware 
carries out a policing function which overwrites OPC and DPC codes, using the 
processes defined in the SDL described above. Figure 9 shows in further detail 

25 the structure of the other signalling hardware. A microprocessor 91 is linked by a 
control interface 92 to firmware 93, which may include an EPROM, and to buffers 
B1, B2,... . Although for ease of illustration only two buffers are shown, in 
practice buffer capacity is provided for each link handled by the signalling 
hardware. The policing function already described is executed by software 

30 processes running on the microprocessor 91, in combination with firmware and 
hardware operations. In particular, instructions to overwrite selected bytes held in 
a buffer are downloaded from the microprocessor to the firmware. In this 
example, this results in the byte position corresponding to the NUP Network 
Identifier, the byte position corresponding to the OPC and the byte position 
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corresponding to the DPC being overwritten with predetermined allowed values 
which are specific to a particular SS7 signalling link, referenced Link 1 . Then the 
signal is passed upwards to the call processing system which executes basic call 
processing functions. The signalling hardware functions autonomously, but may 
5 pass alarm signals, such as those generated as a result of checking OPC/DPC 
values, to the management systems. 

Although in Figure 8 just a single instance of each element is shown, in 
practice the exchange will usually comprise a single Call Processing System 
connected to multiple processes. Each processor may consolidate traffic from a 

10 hierarchy of transport processes and signalling hardware modules. 

Figure 10 shows a future alternative embodiment of the invention. In this 
case region a is private network using internet protocols, i.e. an intranet. A node 
102 external to the private network, in region b, is connected to a node 101 in 
region a. This might be done, for example, in order to provide access to certain 

1 5 web pages running on a web server at the node in region a. The node in region 
has, in this example, internet address 111.111.1.111 and the node in region b has 
internet address 123.123.1.123. In order to prevent access by the region b node 
to other nodes 103, 104, node 101 overwrites the destination internet address and 
the return internet address of incoming packets from node 102 with the allowed 

20 values, namely 111.111.1.111 and 1 23. 1 23. 1 . 1 23. As in the previous examples, 
an alarm may be raised if either of these addresses in an incoming packet has an 
illicit value. The steps of testing and overwriting the network addresses is carried 
out in the network interface, for example in an X25 or ethernet interface card, 
before the packet is passed to the internet protocol (IP) layer of the software on 

25 the node 101. The function of the IP layer can therefore remain entirely 
conventional and it is not necessary at this level to distinguish between packets 
originating elsewhere on the intranet and packets originating from an external 
source such as node 102. 



30 



WO 99/16259 



PCT/GB98/02808 



11 

CLAIMS 

1. A method of operating a node in a communications network, which node 
is in use connected to a signal source external to the communications network, the 
method comprising: 

5 a) receiving from the said signal source signals which include a control 

field, which control field takes one of a plurality of possible values, and the 
subsequent handling of the said signal by the network being controlled according 
to the value of the control field; 

b) within a lower level of a messaging protocol running on the node, and 
10 prior to the processing of the signal by higher level functions running on the node, 

overwriting the control field with a value from a restricted subset of the plurality 
of possible values; and 

c) subsequently processing the signal in the network in dependence upon 
the said value overwritten in step (b) 

15 

2. A method of operating a communications network comprising: 

a) communicating control signals between nodes of the network, which 
control signals conform to a predetermined signalling protocol; 

b) at one of the said nodes, receiving from a signal source external to the 
20 network signals conforming to the said predetermined protocol and including a 

control field, which control field takes one of a plurality of possible values; 

c) within a lower level of a messaging protocol running on the node, and 
prior to the processing of the signal by higher level functions running on the node 
overwriting the control field with a value from a restricted subset of the plurality of 

25 possible values; and 

d) subsequently processing the signal in the network in dependence upon 
the said value overwritten in step (c). 

3. A method according to claim 1 or 2, in which step (c) is carried out within 
30 a data link layer interface, which data link layer interface is arranged to respond to 

service request from network layer functions of the node and to issue service 
requests to the communications network. 
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4. A method according to any one of the preceding claims, in which the said 
control field is a routing control field, and the overwriting of the routing control 
field with a predetermined value in step (b) limits the routing of signals to or from 
the external source to part only of the communications network. 

5 

5. A method according to claim 4, in which the routing of signals to or from 
the external source is limited to a point-to-point connection between the external 
source and the node. 

10 6. A method according to any one of the preceding claims, in which the said 

signals conform to a common channel signalling protocol. 

7. A method according to claim 6, in which the common channel signalling 
protocol is ITU-T Signalling System no. 7. 

15 

8. A node suitable for connection in a communications network and 
comprising: 

a) a network interface for connection to the communications 

network; 

20 b) a signal interface for connection to a signal source external to the 

communications network; 

c) means connected to the signal interface for overwriting, within a 
lower level of a messaging protocol, a control field in a signal received via the 
signal interface from the signal source with one of a subset of predetermined 

25 values; and 

d) signal processing means for processing the said signal in 
dependence upon the value of the said control field. 

9. A node according to claim 8, in which the said means for overwriting are 
30 located within a data link layer interface, which data link layer interface is 

arranged to respond to service request from network layer functions of the node 
and to issue service requests to the communications network. 
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10. A node according to claim 8 or 9, in which the signal processing means 
are arranged to route the signal in dependence upon the value of the said control 
field. 



5 11. A communications network including a node according to claim 8 or 9 or 
10. 



12. A communications network according to claim 1 1 including a common channel 
signalling network carrying signals conforming to a common channel signalling 
10 protocol and in which both the said network interface and the said signal 
interface are arranged to communicate signals conforming to the said common 
channel signalling protocol. 



13. A method of operating a node in a communications network, which node 
15 is in use connected to a signal source external to the communications network, the 

method comprising: 

a) receiving from the said signal source signals which include a control 
field, which control field takes one of a plurality of possible values, and the 
subsequent handling of the said signal by the network being controlled according 

20 to the value of the control field; 

b) overwriting the control field with a value from a restricted subset of 
the plurality of possible values; and 

c) subsequently processing the signal in the network in dependence upon 
the said value overwritten in step (b) 

25 

14. A method of operating a communications network comprising: 

a) communicating control signals between nodes of the network, 
which control signals conform to a predetermined signalling protocol; 

b) at one of the said nodes, receiving from a signal source external 
30 to the network signals conforming to the said predetermined protocol and including 

a control field, which control field takes one of a plurality of possible values; 

c) overwriting the control field with a value from a restricted subset 
of the plurality of possible values; and 
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d) subsequently processing the signal in the network in dependence 
upon the said value overwritten in step (c). 



1 5. A method of operating a node in a communications network, which node is in 
5 use connected to a signal source external to the communications network, the 
node including a data link layer interface arranged to respond to service request 
from network layer functions of the node and to issue service requests to the 
communications network the method comprising: 

a) receiving from the said signal source signals which include a control 
10 field, which control field takes one of a plurality of possible values, and the 

subsequent handling of the said signal by the network being controlled according 
to the value of the control field; 

b) within the data link layer interface overwriting the control field with a 
value from a restricted subset of the plurality of possible values; and 

15 c) subsequently processing the signal in the network in dependence upon 

the said value overwritten in step (b). 

16. A method according to any one of claims 1 to 7 or claim 15, including writing 
control field data received on each of a plurality of signalling links into 

20 respective signalling link data buffers, and overwriting the control fields in the 
respective data buffers with the said value. 

17. A node arranged to operate in accordance with the method of claim 15 or 16. 

25 18. A method substantially as described with respect to the accompanying 
drawings. 

19. A node substantially as described with respect to the accompanying drawings. 

30 20. A communications network substantially as described with respect to the 
accompanying drawings. 
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